Accepting request 778639 from Base:System

OBS-URL: https://build.opensuse.org/request/show/778639
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/pesign-obs-integration?expand=0&rev=37

0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch

@@ -0,0 +1,26 @@
+From 2ef935c08c201676665922c913db2fea429e45cc Mon Sep 17 00:00:00 2001
+From: Marcus Meissner <meissner@suse.de>
+Date: Thu, 13 Feb 2020 16:20:45 +0100
+Subject: [PATCH] sign stage3.bin from s390-tools with sign-files (bsc#1163524)
+
+---
+ pesign-repackage.spec.in | 3 +++
+ 1 file changed, 3 insertions(+)
+
+diff --git a/pesign-repackage.spec.in b/pesign-repackage.spec.in
+index 1679878..3d3108b 100644
+--- a/pesign-repackage.spec.in
++++ b/pesign-repackage.spec.in
+@@ -148,6 +148,9 @@ for sig in "${sigs[@]}"; do
+ 			/usr/lib/rpm/pesign/gen-hmac -r %buildroot "/${sig%.sig}"
+ 		fi
+ 		;;
++	*stage3.bin.sig)
++		/usr/lib/rpm/pesign/kernel-sign-file -i pkcs7 -s "$sig" sha256 "$cert" "$f"
++		;;
+ 	*)
+ 		echo "Warning: unhandled signature: $sig" >&2
+ 	esac
+-- 
+2.16.4
+

pesign-obs-integration.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Wed Feb 19 14:25:32 UTC 2020 - Marcus Meissner <meissner@suse.com>
+
+- 0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
+  Hard code signing of stage3.bin of s390-tools (bsc#1163524)
+
 -------------------------------------------------------------------
 Wed Nov  6 09:58:34 UTC 2019 - Jiri Slaby <jslaby@suse.com>
 
@@ -10,6 +16,11 @@ Wed Nov  6 03:52:16 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
 - 0001-Keep-the-files-in-the-OTHER-directory.patch to keep the
   files in the OTHER directory (boo#1155474)
 
+-------------------------------------------------------------------
+Wed Sep  4 12:18:39 UTC 2019 - Michal Suchanek <msuchanek@suse.com>
+
+- Require pesign on arm (boo#1134303).
+
 -------------------------------------------------------------------
 Thu Aug  1 02:41:28 UTC 2019 - Gary Ching-Pang Lin <glin@suse.com>
 

pesign-obs-integration.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package pesign-obs-integration
 #
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -30,13 +30,15 @@ Requires:       openssl
 Requires:       pesign
 %endif
 BuildRequires:  openssl
-Url:            http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
+URL:            http://en.opensuse.org/openSUSE:UEFI_Image_File_Sign_Tools
 Source:         %{name}_%{version}.tar.gz
 Patch1:         0001-Passthrough-license-tag.patch
 Patch2:         0001-Add-support-for-kernel-module-compression.patch
 Patch3:         0001-Initialize-compress-variable.patch
 Patch4:         0001-Keep-the-files-in-the-OTHER-directory.patch
 Patch5:         0001-brp-99-compress-vmlinux-support-xz-compressed-vmlinu.patch
+# https://github.com/openSUSE/pesign-obs-integration/pull/17
+Patch6:         0001-sign-stage3.bin-from-s390-tools-with-sign-files-bsc-.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 # suse-module-tools <= 15.0.10 contains modsign-verify
 Requires:       suse-module-tools >= 15.0.10
@@ -52,6 +54,7 @@ boot loader, kernel and kernel modules in the openSUSE Buildservice.
 %patch3 -p1
 %patch4 -p1
 %patch5 -p1
+%patch6 -p1
 
 %build